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CODE OBFUSCATION AND CONTROLLING 
A PROCESSOR BY EMULATION 

The present invention relates to a method of producing obfuscated 
5 object code, an executable program in object code, a method of producing 
digital media having a secured executable program thereon, and a digital 
media having a secured executable program thereon. The present invention 
also relates to a method of controlling a processor to run a program and to a 
digital media having a secured executable program thereon. 

10 

In general, this invention relates to software security. It is well known 
that software can be valuable, and that there are persons and organisations 
who seek to circumvent any security measures applied to protect the software. 

15 Programs are written in high level languages such as C and Fortran. 

They are then compiled into object code, which may be machine language or 
may be transformed into machine language. Devices, such as compilers, are 
available to make the translation of a source code into an object code. The 
machine language is a stream of binary digits which will include the instructions 

20 for an executable program but may also include various security means, for 
example, to ensure that only genuine copies of programs can be run. Crackers 
seek to obtain clear code so that they can circumvent any security means and 
they are helped in this as, for example, reverse compilers which will produce 
source code from a binary stream are available. 

25 

It has been suggested to pad the object code, that is, to add redundant 
additional code, to hide or obfuscate the functional object code but crackers 
have proved adept at recognising and removing the padding. It has also been 
suggested that the object code be encrypted. However, an encryption key 
30 needs to be available when the program is run so that the instructions can be 
decrypted. It will be apparent that once a cracker finds the key, access to the 
unencrypted code is provided. 

The present invention seeks to provide new and improved methods of 
35 securing software. 
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According to a first aspect of the present invention there is provided a 
method of producing obfuscated object code, the method comprising the steps 
of substituting a variable in source code with a selected function of the variable, 
and compiling the source code to produce object code, the selected function 
5 causing the variable to be presented in the compiled object code as a series of 
operations. 

As variables are compiled into series of operations, the size of the object 
code is increased and this, in itself, acts to hide or obscure the useful code. 
10 However, the provision of a series of operations to present one variable has the 
advantage over the padding of codes that all of the resultant code appears to 
be useful making it much more difficult for crackers to determine which object 
code they need. 

15 In a preferred embodiment, the series of operations by which the 

variable is presented is made up of arithmetic and/or logical operations, and the 
series of operations is arranged, upon running of the object code, to provide the 
variable. Additionally and/or alternatively, the series of operations by which the 
variable is presented comprises complementary operations arranged, upon 

20 running of the object code, to provide the variable. 

In this respect, the length of the object code is greatly increased, and the 
object code is thereby obfuscated, by presenting a variable, for example, as a 
series of arithmetic or other operations. 

25 

In an embodiment, the selected function is defined in a template of the 
source code. 

For example, the template of the soqrce code defines a plurality of 
30 functions which are each arranged to compile to present the variable as a 
series of operations, and the method further comprises selecting one of the 
functions to substitute for the variable in the source code. 



35 



Preferably a different key is associated with each one of the functions in 
the template, and the method further comprises substituting the variable in 
source code with the template and selecting one of the functions in the 
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template by selecting the key which is associated with said one function. 

The provision of a plurality of functions which may each be selected to 
substitute for the variable enables a particular variable to be compiled in a 
5 number of different ways. This is particularly helpful where one source is 
producing many different software applications. For example, a manufacturer 
of CDs will produce CDs with different titles and contents but will keep formats 
and security measures common across all titles. In many prior art security 
solutions, a cracker only needs to crack the protection on one title to be 
l o enabled to crack all titles by replicating the actions made. 

The provision of a plurality of functions, as defined above, enables a 
different function to be chosen for the same variable for each different title. The 
crackers' endeavours to access the contents of one CD title, therefore, are not 
15 assisted if the cracker does manage to access the contents of another CD title. 
In addition, the use of a key method to select the functions enables some 
automation of the process of securing the software. 

In an embodiment, the source code involves stored arrays and 
20 templates and utilises pointers to navigate the arrays and templates. 

Preferably, the source code is a standard programming language. For 
example, the source code is C ++ . 

25 . The present invention also extends to an executable program in object 
code, the program having been compiled from source code, wherein a variable 
in the source code has been compiled to be presented in object code as a 
series of operations whereby the object code is obfuscated. 

30 The series of operations by which the variable is presented may be 

made up of arithmetic and/or logical operations, and the series of operations 
arranged, upon running of the object code, to provide the variable. Additionally 
and/or alternatively, the series of operations by which the variable is presented 
may comprise complementary operations arranged, upon running of the object 

35 code, to provide the variable. 
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The use of a series of operations which are arranged, upon running of 
the object code, to provide the variable enables the instructions of the object 
code, or transformed from the object code, to run the program without it being 
necessary to decrypt or otherwise interpret the obfuscated object code. 

5 

In an embodiment, the series of operations has been produced by 
substituting the variable in the source code with a selected function arranged to 
cause the variable to be presented in the compiled object code as a series of 
operations. 

10 

For example, the selected function was defined in a template of the 
source code. 

Preferably, the template of the source code had defined a plurality of 
15 functions which were each arranged to compile to present the variable as a 
series of operations, and one of the functions had been selected to substitute 
for the variable in the source code. 

According to a further aspect of the present invention there is provided a 
20 method of producing digital media having a secured executable program 

thereon, the method comprising the steps of securing an executable program 
by associating the executable program with a security program which is 
arranged to control access to the executable program, and applying the 
secured executable program to the digital media, and the method further 
25 comprising obfuscating the object code of the security program, wherein the 
object code of the security program has been obfuscated by substituting a 
variable in source code with a selected function of the variable, and compiling 
the source code to produce object code, the selected function causing the 
variable to be presented in the compiled object code as a series of operations. 

30 

In an embodiment, the series of operations by which the variable is 
presented is made up of arithmetic and/or logical operations, and wherein the 
series of operations is arranged, upon running of the object code, to provide the 
variable. Additionally and/or alternatively, the series of operations by which the 
35 variable is presented comprises complementary operations arranged, upon 
running of the object code, to provide the variable. 
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10 



Preferably, the executable program and the security program are 
associated at object code level. 

The security program which is provided to control access to the 
executable program may be any suitable security program. For example, the 
security program may be arranged to encrypt the executable program, and/or 
blocks of the executable program may be moved into the security program, 
and/or the security program may be arranged to require the running of an 
authentication program. 

In an embodiment, the selected function in the source code of the 
security program is defined in a template of the source code. 

For example, said template of the security program source code defines 
15 a plurality of functions which are arranged to compile to present the variable as 
a series of operations, and the method further comprises selecting one of the 
functions to substitute for the variable in the source code. 

Preferably, a different key is associated with each one of the functions in 
20 the template, and the method further comprises substituting the variable in 
source code with the template and selecting one of the functions in the 
template by selecting the key which is associated with said one function. 

In an embodiment, the source code of the security program involves 
25 stored arrays and templates and utilises pointers to navigate the arrays and 
templates. 

The source code of the security program is preferably a standard 
programming language such as C*" 1 ". 



30 



. Preferably, the digital media onto which the secured executable program 
is applied is an optical disc and, for example, the secured executable program 
is applied onto the optical disc by laser beam encoding. 



35 



The present invention also extends to a digital media having a secured 
executable program thereon, wherein an executable program is secured by 
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having a security program associated therewith, the security program being 
arranged to control access to the executable program, and wherein the security 
program is in object code which has been obfuscated, the security program 
having been compiled from source code, and a variable in the source code of 
5 the security program having been compiled to be presented in object code as a 
series of operations whereby the object code has been obfuscated. 

For example, the series of operations by which the variable is presented 
is made up of arithmetic and/or logical operations, and wherein the series of 
10 operations is arranged, upon running of the object code, to provide the variable. 
Additionally and/or alternatively, the series of operations by which the variable 
is presented comprises complementary operations arranged, upon running of 
the object code, to provide the variable. 

15 In an embodiment, the series of operations has been produced by 

substituting the variable in the source code of the security program with a 
selected function arranged to cause the variable to be presented in the 
compiled object code as a series of operations. 

20 For example, the selected function was defined in a template of the 

source code. 

In an embodiment, the template of the source code had defined a 
plurality of functions which were each arranged to compile to present the 
25 variable as a series of operations, and one of the functions had been selected 
to substitute for the variable in the source code. 

Preferably, the executable program £nd the security program are 
associated at object code level. 

30 

The executable program may be encrypted on the digital media and the 
associated security program is then arranged to enable decryption of the 
executable program. 

35 Additionally and/or alternatively, blocks from the executable program 

may have been relocated within the security program. 



-7- 



Additionally and/or alternatively, the security program may be arranged 
to require the running of an authentication program. 

Where the security program is arranged, for example, to require the 
5 running of an authentication program, that authentication program will also be 
provided on the digital media. It would be possible for the security program to 
incorporate the authentication program, but currently it is generally preferred 
that the security program points to the authentication program. 

10 . In an embodiment, the digital media is an optical disc on which the 

executable program and the security program are encoded. For example, the 
optical disc is a CD, a CD-ROM, or a DVD. 

The executable program is a games program, and/or a video program, 
15 and/or an audio program. 

In this latter respect it will be appreciated that the securing methods 
defined above are generally applicable to all software applications. Where 
software is provided on optical discs, the executable programs provided on the 
20 discs may comprise games programs and/or video programs, and/or audio 
programs and/or any other multi-media formats. 

A method of producing obfuscated object code, and/or an executable 
program in object code, and/or a method of producing digital media having a 
25 secured executable program thereon, and/or a digital media having a secured 
executable program thereon as defined above may each be used alone or in 
conjunction with a method of controlling a processor to run a program, and/or a 
digital media having a secured executable program thereon as defined below. 

.30 According to a still further aspect of the present invention there is 

provided a method of controlling a processor to run a program comprising the 
steps of translating instructions from the program into a reduced instruction set 
format to which said processor is not responsive, 

causing the translated instructions to be applied to a virtual processor 
35 which is responsive to the reduced instruction set format, and 

causing the virtual processor to run the instructions applied thereto and 
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to apply a series of simple instructions, to which the processor is responsive, to 
the processor. 

Generally, the instructions from a program which are applied to a 
5 processor, such as a CPU, are clear and it is possible for crackers to access 
the instructions during running of the program to get access to the program. 
With a method of the invention, the translated instructions applied to a virtual 
processor, that is a processor configured in software, are not the standard 
instructions generally used and therefore are not useful to the cracker. 
10 Furthermore, the series of simple instructions which are applied to the 

processor are greater in number than would be usual and thus obfuscate the 
instructions. 

In a preferred embodiment, the method further comprises encrypting the 
15 translated instructions to be applied to the virtual processor, and enabling the 
virtual processor to respond to the encrypted instructions without decrypting 
them. 

One weakness of encryption techniques is that a key or other device has 
20 to be provided to enable decryption. Crackers have experience of identifying 
such a key. However, methods of the invention do not require the virtual 
processor to decrypt the translated instructions in order to run the instructions 
so that no key is provided. Decryption can be avoided by providing in the 
virtual processor information enabling the virtual processor to understand each 
25 encrypted instruction and to produce appropriate actions in response thereto. 
In this way, the virtual processor never works with clear instructions which 
might be accessed by crackers. 

It is also proposed that more than one series of instructions in the 
30 reduced instruction set format be provided which could be substituted for each 
instruction from the program. Each series of instructions is different whereby 
individual virtual processors can receive translated instructions which differ 
from those received by other virtual processors. This can be achieved by the 
use of templates. 

35 

Thus, in a preferred embodiment, the method further comprises utilising 
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templates to translate and encrypt the instructions, a selected template 
providing a series of instructions in the reduced instruction set format for each 
instruction from the program. 

5 For example, the templates define a plurality of series of instructions in 

the reduced instruction set format for an instruction in the program, the method 
further comprising selecting one of said plurality of series of instructions to be 
the translation for said instruction. 

10 • Preferably, a different key is associated with each one of the plurality of 

series of instructions in the reduced instruction set format in the template, and 
the method further comprises selecting a key which is associated with one of 
said plurality of series of instructions and translating the instruction in the 
program to the one of said plurality of series of instructions which is associated 

15 with the selected key. 

As explained previously, the use of keys enables some automation of 
the programming required to perform the method. 

20 It will be appreciated that the use of a virtual processor to act on 

translated instructions from a program and then to provide a large number of 
simple instructions to a processor would add unacceptable delays if this 
method of control were used, for example, for running a games program. 
Accordingly, it is proposed that only parts of the program be subject to 

25 processing by the virtual processor. 

A method of controlling a processor as defined above may be used 
alone or may be used in conjunction with a method of producing obfuscated 
object code, and/or an executable program in object code, and/or a method of 
30 producing digital media having a secured executable program thereon, and/or a 
digital media having a secured executable program thereon as defined above. 

The present invention also extends to a digital media having a secured 
executable program thereon, wherein an executable program is secured by 
35 having a security program and an emulation program associated therewith, the 
security program being arranged to control access to the executable program, 
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and the emulation program causing predetermined functions or routines of the 
executable program to be run on a virtual processor provided by said emulation 
program, wherein the emulation program is arranged to translate instructions 
from the executable program into a reduced instruction set format, to cause the 
5 translated instructions to be applied to the virtual processor, and to cause the 
virtual processor to run the instructions applied thereto and to output a series of 
simple instructions for application to a processor. 

Embodiments of the present invention will hereinafter be described, by 
l o way of example, with reference to the accompanying drawings, in which: 

Figure 1 shows schematically the translation of a high level source code 
into machine language and illustrates the use of templates by a compiler; 

Figure 2 schematically illustrates the production of an optical disc with a 
secured executable program; and 
15 Figure 3 illustrates the use of a virtual processor in a method of 

controlling a processor of the invention. 

Embodiments of the present invention are described below and 
illustrated, with reference to executable programs such as games programs, 
20 which are provided on optical discs such as CD-ROMs or DVDs. However, it 
will be appreciated that the present invention is not restricted to the particular 
examples given and in particular is applicable to all software and to any digital 
media for storing the software. 

25 Figure 1 shows the translation of source code, indicated at 2, into a 

machine language, that is a sequence of binary digits, indicated at 4. As is 
shown, the source code 2 which is generally a high level language, for 
example, C, C ++ , or Fortran, is translated into object code 6 by way of a 
compiler 8. 

30 

In some instances, depending upon the language of the source code 2 
and the nature of the compiler 8, the object code 6 is the same or substantially 
similar to the machine language 4. In the embodiment illustrated in Figure 1 , 
the object code 6 is translated by an assembler 10 to provide the machine 
35 language 4. 
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The method illustrated in Figure 1 is applicable irrespective of the type of 
the source code 2, but it is described and illustrated further with particular 
reference to C ++ source code 2. C* + is a particularly flexible language as it 
uses, as indicated in Figure 1, templates and arrays generally indicated at 12, 
5 1 4, and 1 6. The template 1 4 of Figure 1 has been indicated as CValue and this 
is a class template which is to be used in the present invention to obfuscate the 
object code 6 produced from the source code 2. 

To give a very simple example, a program written in C might set the 
1 0 values of variables, such as int i and int j as set out below: 

int i = 5 
int j = i + 6 



15 As can be seen in Figure 1 , the template GValue provides for each of 

keys ko, ki ... to kn an associated function of a variable, namely functions f(into), 
f(inti) .... f(int n ). Each of these functions is different and each involves, for 
example, a series of arithmetic or logical operations. 



20 When using the illustrated method, a programmer replaces the values of 

• variables in the source code with specified functions from the CValue template 
14. Thus, instead of int i = 5 the source code will specify CValue < key, int > i = 
5. Accordingly, during compilation of the source code 2 to form the object code 
6 the variable int i which. was to be set to 5 will be replaced by the series of 

25 operations defined by the appropriate function f(into), f(inti) .... f(int n ) as . 
determined from the CValue template 14 by selecting one of the keys ko, ki ... 
kn. 



As set out above, variables in the source code have been replaced by, 
30 for example, a series of mathematical operations. This causes obscurity in or 
obfuscation of the resulting object code 6. Thus, instead of setting int i to 5, for 
example, f(into) might specify the following sequence of operations: 

m = 5 + key 
35 n = 6 + key 

p = m + n 
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I = p - (2 x key) 
int I = i. 

In this manner, the variable i has been set to 5 but in a series of 
5 operations. In the object code 6 output by the compiler 8 all of the operations 
indicated will appear to be useful so that a cracker will have difficulty in 
comprehending where the obfuscation arises. Of course, as the operations 
lead eventually to the correct value for the required variable, the object code 6, 
or the machine language 4 assembled therefrom can be directly run by a 
1 o processor without the need for any decryption or decoding. 

The operations carried out on the variables in this manner will generally 
be much more complex than those set out above. In addition, rather than using 
a series of simple arithmetic operators such as plus, divide, subtract and 
15 multiply, it will generally be preferred to use functions such as XOR which can 
reliably return a variable to its assigned value. In this respect, a technique 
which may be used in practice is set out below. • ; * • 

This technique uses C ++ templates to implement Nowhere: 
20 q = TJV1ANGLE_SEED_VALUE_N XOR TJVIANGLE_SEED_VALUE_M 

template<class T, int x = 0, int z = 0> 

struct V 

{ 

25 T operator () (Tx.Tv.Tz) 

{ 

T y = x A z; 
return (T) (v A y); 

} 

30 T operator () (Tv) 

{ 

T y = x A z; 
return (T) (v A y ); 

} 

35 }; 

int main (Int argc, char* argv [ ] ) 
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int z = T_MANGLE_SEED_VALUE_M; 
int y = T_MANGLE_SEED_VALUE_N; 
if (12345678 == argc) 
5 { 

/ / This never happens 

z = T_MANGLE_SEED_VALUE_0; 

y = T_MANGLE_SEED_VALUE_P; 

} 

10 int a = V<int, T_MANGLE_SEED_VALUE_N, T_MANGLE_SEED_VALUE_M> 

()(argc); 

// Here a == V 

int b = a; 

return = V<int> () (y, b, z); 

15 } 

Looking at the generated code, we see q's components (N and M) are 
used to mangle the value, and then q is used at run time to unmangle the 
value. This is asymmetric, in that no single value is used in the encrypt/decrypt 
20 cycle. 

It will be apparent from the above that the method causes variables in 
the source code to be presented in the object code as a series of operations. 
This adds complexity and obscurity to the object code and provides protection 
25 against crackers. 

In addition, the provision of different functions which can be selected by 
selection of an associated key enables different object codes to be generated 
to perform the same function. Thus, one title of a game on a CD-ROM can be 
30 provided in the same format as a second title. However, each title can have 
different object code. Therefore, if a cracker manages to crack the code of the 
first title this will not provide assistance for the cracking of the second title. 



35 



Figure 2 shows schematically a method of applying a secured game to a 
CD-ROM 30. The game comprises a game program game.exe 20 and this is 
to be applied to the CD-ROM 30 with appropriate security software. In this 



respect, a software toolkit 22 provides the programs necessary to protect the 
game program 20. The toolkit 22 includes a security applying program 
SECPREP.DLL 24 which acts to access an appropriate security program 28 
which is to be wrapped with the games program 20. In this respect, the 
security applying program 24 accesses one of a number of security programs 
SECSERV.DLL 28 which are appropriately stored in memory 26. Each 
individual security program 28 is associated with a respective key 32 and the 
security applying program 24 randomly chooses one the keys 32 whereby the 
corresponding security program 28 is selected. Thereafter, the selected 
security program 28 is packaged with the games program 20 and with any 
other security measures to form an executable program file 34 which is then 
applied to the CD-ROM 30 by appropriate encoding means (not shown). 

In the embodiment illustrated in Figure 2 the toolkit 22 has not only 
packaged the games program 20 with the security program 28, but it has also 
provided an authentication program 36. 

The security program 28 acts as a wrapper for the game program 20 
and the authentication program 36. Thus, when the executable application file 
34 is accessed by a user putting the CD-ROM 30 into a drive in a computer, the 
security program 28 requires the authentication program 36 to run. For 
example, and in known manner, the authentication program 36 may look for 
known errors on the disc 30, which errors will have been put on the disc 30 
during the production process described above. The disc will be declared 
genuine if the expected errors are found and in that case the security program 
28 will then enable the loading and running of the game program 20. In this 
respect, whenever the security program 28 is running the object code it 
produces will be obfuscated as described above, making it difficult for crackers 
to identify and remove the security program 28. This prevents the crackers 
from gaining access to the games program 20. 

The security offered by the security program 28 can be improved by, for 
example, taking blocks of programming, for example, as indicated at 38, from 
the games program and incorporating them in the security program 28. 
Pointers 40 to the blocks 38 are provided in the games program 20. By this 
technique parts of the game program itself are also hidden from crackers by the 
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obfuscated code which is produced when running the blocks 38 within the 
security program 28. The movement of blocks 38 from the games program 20 
and into the security program 28 is undertaken by the software toolkit 22 during 
the production of the executable program file 34. 

5 

It will be appreciated that security measures additional to those 
described and illustrated in Figure 2 may be incorporated by way of the 
software toolkit 22. For example, the games program 20 may also be 
encrypted. 

10 

The techniques described above for obfuscation of code may be used 
alone to secure software or may be used in conjunction with the following 
emulation technique. The emulation technique which will now be described 
and illustrated with reference to Figure 3, may be used in conjunction with other 
15 security techniques or it may be used alone. 

* It will be appreciated that a program, for example, in C ++ language, is 
compiled to produce an instruction set for application to a processor. If a 
cracker can get clear access to the instruction set, for example, of a game, 
20 reverse engineering of the game can be carried out. Figure 3 illustrates an 
emulation technique which can be used to hide instructions from crackers. 

As indicated in Figure 3, source code 2 is applied to a compiler 50 to 
produce an instruction set indicated at 52. However, the compiler 50 is 
25 arranged to encrypt the compiled instructions and is also arranged to provide 
instructions in a reduced instruction set format rather than the more usual 
native instructions. 

As illustrated in Figure 3, the compiler 50 is provided with a library 54 of 
30 templates 58 which, as described above with reference to Figure 1 , can 
selectively provide one of a number of instruction sets at 52. In this respect, 
the compiler 50 is arranged to select one of a number of keys 56 whereby a 
corresponding template 58 is selected for use in the production of the 
instruction set 52. A virtual processor or emulator 60 is also configured in 
35 software using the selected key by way of an emulator compiler 64. This 
enables the emulator 60 to act on the instructions in the instruction set 52 
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without needing to decrypt them. 

By way of example, the instruction set obtained by the use of the 
template 58 with the key 0 might be encrypted by the addition of the value +3 to 
5 each variable value. The emulator 60, therefore, can understand that each 
variable must be reduced by three and can therefore execute the instructions. 
Thus, for example, if the MOV instruction should be 0 and the emulator 
receives the variable 3 it can understand that, for this instruction set, 3 is to be 
set to MOV and act accordingly. By this means, therefore, there is no clear and 
10 unencrypted instruction set input to the emulator 60. 

In addition, the emulator 60 is arranged to produce a large series of 
instructions for each genuine instruction and to apply this large series of 
instructions to a CPU 62. For example, instead of instructing the CPU 62 to 
15 add 3 the emulator 60 might issue the string of instructions: 

add 10, 

minus 7, 

divide by 1 , 

multiply by 1. 

20 This adds to the complexity of the instructions being fed to the CPU 62 and this 
complexity also acts to obfuscate the code for crackers. 

It will be appreciated that using the emulator 60 as described will add to 
the real time required for processing and it is not, therefore, appropriate to run 
25 a games program on CPU 62 in this manner. Instead, parts only of the 

program are to be hidden from crackers using this technique. For example, if 
this technique is used in conjunction with the techniques described above, the 
security program 28, which may include blocks 38 from the games program 20, 
can be subject to the emulation technique. 

30 

It will be appreciated from the above that if during compilation a different 
key 56 is chosen, the instruction set 52 will be changed as will the emulator 60. 
This ability to use different instruction sets and emulators on different discs 
adds a further level of security as it enables different discs published by the 
35 same manufacturer to have different security. It is also significant that the 
instruction set 52 remains encrypted as this ensures that there is no clear 
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instruction set available which might be used by crackers. 

It will be appreciated that alterations and modifications may be made to 
the invention as described and illustrated within the scope of the. appended 
claims. 
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CLAIMS 

1 . A method of producing obfuscated object code, the method comprising 
the steps of substituting a variable in source code with a selected function of 

5 the variable, and compiling the source code to produce object code, the 
selected function causing the variable to be presented in the compiled object 
code as a series of operations. 

2. A method as claimed in Claim 1 , wherein the series of operations by 
10 which the variable is presented is made up of arithmetic and/or logical 

operations, and wherein the series of operations is arranged, upon running of 
the object code, to provide the variable. 

3. A method as claimed in Claim 1 or Claim 2, wherein the series of 
15 operations by which the variable is presented comprises complementary 

operations arranged, upon running of the object code, to provide the variable. 

4. A method as claimed in any preceding claim, wherein the selected 
function is defined in a template of the source code. 

20 

5. A method as claimed in Claim 4, wherein the template of the source 
code defines a plurality of functions which are each arranged to compile to 
present the variable as a series of operations, the method further comprising 
selecting one of the functions to substitute for the variable in the source code. 

25 

6. A method as claimed in Claim 5, wherein a different key is associated 
with each one of the functions in the template, and the method further 
comprises substituting the variable in source code with the template and 
selecting one of the functions in the template by selecting the key which is 

30 associated with said one function. 

7. A method as claimed in any preceding claim, wherein the source code 
involves stored arrays and templates and utilises pointers to navigate the 
arrays and templates. 

35 

8. A method as claimed in any preceding claim, wherein the source code is 
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a standard programming language. 

9. A method as claimed in Claim 8, wherein the source code is C ++ . 

1 0. An executable program in object code, the program having been 
compiled from source code, wherein a variable in the source code has been 
compiled to be presented in object code as a series of operations whereby the 
object code is obfuscated. 

11. An executable program as claimed in Claim 10, wherein the series of 
operations by which the variable is presented is made up of arithmetic and/or 
logical operations, and wherein the series of operations is arranged, upon 
running of the object code, to provide the variable. 

1 2. An executable program as claimed in Claim 1 0 or Claim 1 1 , wherein the 
series of operations by which the variable is presented comprises 
complementary operations arranged, upon running of the object code, to 
provide the variable. 

1 3. An executable program as claimed in any of Claims 10 to 12, wherein . 
the series of operations has been produced by substituting the variable in the 
source code with a selected function arranged to cause the variable to be 
presented in the compiled object code as a series of operations. 

14. An executable program as claimed in Claim 13, wherein the selected 
function was defined in a template of the source code. 

15. An executable program as claimed in Claim 14, wherein the template of 
the source code had defined a plurality of functions which were each arranged 
to compile to present the variable as a series of operations, and one of the 
functions had been selected to substitute for the variable in the source code. 

16. A method of producing digital media having a secured executable 
program thereon, the method comprising the steps of securing an executable 
program by associating the executable program with a security program which 
is arranged to control access to the executable program, and applying the 
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secured executable program to the digital media, and the method further 
comprising obfuscating the object code of the security program, wherein the 
object code of the security program has been obfuscated by substituting a 
variable in source code with a selected function of the variable, and compiling 
5 the source code to produce object code, the selected function causing the 
variable to be presented in the compiled object code as a series of operations. 

17. A method of producing digital media having a secured executable 
program thereon as claimed in Claim 16, wherein the series of operations by 

10 which the variable is presented is made up of arithmetic and/or logical 

operations, and wherein the series of operations is arranged, upon running of 
the object code, to provide the variable. 

1 8. A method of producing digital media having a secured executable 
15 program thereon as claimed in Claim 16 or Claim 17, wherein the series of 

operations by which the variable is presented comprises complementary 
operations arranged, upon running of the object code, to provide the variable. 

19. A method of producing digital media having a secured executable 

20 program thereon as claimed in any of Claims 16 to 18, wherein the executable 
program and the security program are associated at object code level. 

20. A method of producing digital media having a secured executable 
program thereon as claimed in any of Claims 16 to 19, wherein the security 

25 program is arranged to encrypt the executable program. 

21 . A method of producing digital media having a secured executable 
program thereon as claimed in any of Claims 16 to 20, further comprising 
moving blocks of the executable program out of the executable program and 

30 relocating the blocks in the security program. 

22. A method of producing digital media having a secured executable 
program thereon as claimed in any of Claims 16 to 21, wherein the security 
program is arranged to require the running of an authentication program. 

35 

23. A method of producing digital media having a secured executable 
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program thereon as claimed in any of Claims 16 to 22, wherein the selected 
function in the source code of the security program is defined in a template of 
the source code. 

5 24. A method of producing digital media having a secured executable 
program thereon as claimed in Claim 23, wherein said template of the security 
program source code defines a plurality of functions which are arranged to 
compile to present the variable as a series of operations, the method further 
comprising selecting one of the functions to substitute for the variable in the 
10 source code. 

25. A method of producing digital media having a secured executable 
program thereon as claimed in Claim 24, wherein a different key is associated 
with each one of the functions in the template, and the method further 

15 comprises substituting the variable in source code with the template and 
selecting one of the functions in the template by selecting the key which is 
associated with said one function. 

26. A method of producing digital media having a secured executable 

20 program thereon as claimed in any of Claims 16 to 25, wherein the source code 
of the security program involves stored arrays and templates and utilises 
pointers to navigate the arrays and templates. 

27. A method of producing digital media having a secured executable 

25 program thereon as claimed in any of Claims 16 to 26, wherein the source code 
of the security program is a standard programming language. 

28. A method of producing digital media having a secured executable 
program thereon as claimed in Claim 27, wherein the source code is C ++ . 

30 

29. A method of producing digital media having a secured executable 
program thereon as claimed in any of Claims 16 to 28, wherein the digital 
media onto which the secured executable program is applied is an optical disc. 

35 30. A method of producing digital media having a secured executable 
program thereon as claimed in Claim 29, wherein the secured executable 
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program is applied onto the optical disc by laser beam encoding: 

31 . A digital media having a secured executable program thereon, wherein 
an executable program is secured by having a security program associated 

5 therewith, the security program being arranged to control access to the 

executable program, and wherein the security program is in object code which 
has been obfuscated, the security program having been compiled from source 
code, and a variable in the source code of the security program having been 
compiled to be presented in object code as a series of operations whereby the 
10 object code has been obfuscated. 

32. . A digital media having a secured executable program thereon as 
claimed in Claim 31, wherein the series of operations by which the variable is 
presented is made up of arithmetic and/or logical operations, and wherein the 

15 series of operations is arranged, upon running of the object code, to provide the 
variable. 

33. A digital media having a secured executable program thereon as 
claimed in Claim 31 or Claim 32, wherein the series of operations by which the 

20 variable is presented comprises complementary operations arranged, upon 
running of the object code, to provide the variable. 

34. A digital media having a secured executable program thereon as 
claimed in any of Claims 31 to 33, wherein the series of operations has been 

25 produced by substituting the variable in the source code of the security 
program with a selected function arranged to cause the variable to be 
presented in the compiled object code as a series of operations. 

35. A digital media having a secured executable program thereon as 

30 claimed in Claim 34, wherein the selected function was defined in a template of 
the source code. 

36. A digital media having a secured executable program thereon as 
claimed in Claim 35, wherein the template of the source code had defined a 

35 plurality of functions which were each arranged to compile to present the 

variable as a series of operations, and one of the functions had been selected 
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to substitute for the variable in the source code. 

37. A digital media having a secured executable program thereon as 

. claimed in any of Claims 31 to 36, wherein the executable program and the 
5 security program are associated at object code level. 

38. A digital media having a secured executable program thereon as 
claimed in any of Claims 31 to 37, wherein the executable program is 
encrypted on the digital media and the associated security program enables 

1 0 decryption of the executable program. 

39. A digital media having a secured executable program thereon as 
claimed in any of Claims 3.1 to 38, wherein blocks from the executable program 
have been relocated within the security program. 

„ 15 • 

40. A digital media having a secured executable program thereon as 
claimed in any of Claims 31 to 39, wherein the security program is arranged to 
require the running of an authentication program. 

20 41 . A digital media having a secured executable program thereon as 

claimed in any of Claims 31 to 40, wherein the digital media is an optical disc 
on which the executable program and the security program are encoded. 

42. A digital media having a secured executable program thereon as 

25 claimed in Claim 41 , wherein the optical disc is a CD, a CD-ROM, or a DVD. 

43. A digital media having a secured executable program thereon as 
claimed in any of Claims 31 to 42, wherein the executable program is a games 
program, and/or a video program, and/or an audio program. 

30 

44. A method of controlling a processor to run a program comprising the 
steps of: 

translating instructions from the program into a reduced instruction set 
format to which said processor is not responsive, 
35 causing the translated instructions to be applied to a virtual processor 

which is responsive to the reduced instruction set format, and ■ 
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causing the virtual processor to run the instructions applied thereto and 
to apply a series of simple instructions, to which the processor is responsive, to 
the processor. 



5 45. A method of controlling a processor to run a program as claimed in 
Claim 44, further comprising encrypting the translated instructions to be applied 
to the virtual processor, and enabling the virtual processor to respond to the 
encrypted instructions without decrypting them. 

10 46. A method of controlling a processor to run a program as claimed in 
Claim 44 or Claim 45, further comprising utilising templates to translate and 
encrypt the instructions, a selected template providing a series of instructions in 
the reduced instruction set format for each instruction from the program. 

15 47. A method of controlling a processor to run a program as claimed in 

Claim 46, wherein the templates define a plurality of series of instructions in the 
reduced instruction set format for an instruction in the program, the method 
further comprising selecting one of said plurality of series of instructions to be 
the translation for said instruction. 

20 

48. A method of controlling a processor to run a program as claimed in 
Claim 47, wherein a different key is associated with each one of the plurality of 
series of instructions in the reduced instruction set format in the template, and 
wherein the method further comprises selecting a key which is associated with 

25 one of said plurality of series of instructions and translating the instruction in the 
program to the one of said plurality of series of instructions which is associated 
with the selected key. 

49. A method of controlling a processor to run a program as claimed in 
30 Claim 48, wherein the virtual processor is enabled to respond to said one of 

said plurality of series of instructions. 

50. A method of controlling a processor to run a program as claimed in any 
of Claims 44 to 49, wherein only instructions from the program which perform 

35 predetermined functions or routines are translated and applied to said virtual 
processor. 
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51 . A method of controlling a processor to run a program as claimed in any 
of Claims 44 to 49, wherein the instructions from the program are in object 
code or have been transformed from object code, and wherein the object code 
has been obfuscated by a method as claimed in any of Claims 1 to 9. 

5 

52. A method of controlling a processor to run a program as claimed in any 
of Claims 44 to 51, wherein the instructions are from an executable program in 
object code as claimed in any of Claims 10 to 15. 

10 53. A method of controlling a processor to run a program as claimed in any 
of Claims 44 to 52, wherein the instructions are from a secured executable 
program on a digital media produced by a method as claimed in any of Claims 
16 to 30. 

15 54. A method of controlling a processor to run a program as claimed in. any 
of Claims 44 to 52, wherein the instructions are from a secured executable 
program on a digital media as claimed in any of Claims 31 to 43. 

55. A digital media having a secured executable program thereon, wherein 
2 0 an executable program is secured by having a security program and an 

emulation program associated therewith, the security program being arranged 
to control access to the executable program, and the emulation program 
causing predetermined functions or routines of the executable program to be 
run on a virtual processor provided by said emulation program, wherein the 
25 emulation program is arranged to translate instructions from the executable 
program into a reduced instruction set format, to cause the translated 
instructions to be applied to the virtual processor, and to cause the virtual 
processor to run the instructions applied thereto and to output a series of 
simple instructions for application to a processor. 

30 

56. A digital media having a secured executable program thereon as 
claimed in Claim 55, wherein the digital media is an optical disc on which the 
executable program, the security program and the emulation program are 
encoded. 

35 

57. A digital media having a secured executable program thereon as 
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ciaimed in Claim 55 or Claim 56, wherein the optical disc is a CD, a CD-ROM 
or a DVD. 

58. A digital media having a secured executable program thereon as 

5 claimed in any of Claims 55 to 57, wherein the executable program is a games 
program and/or a video program and/or an audio program. 

59. A method of producing obfuscated object code substantially as 
hereinbefore described with reference to the accompanying drawings. 

10 

60. An executable program in object code, substantially as hereinbefore 
described with reference to the accompanying drawings. 

61 . A method of producing digital media having a secured executable 

15 program thereon substantially as hereinbefore described with reference to the 
accompanying drawings. 

62. A digital media having a secured executable program thereon 
substantially as hereinbefore described with reference to the accompanying 

20 drawings. 

63. A method of controlling a processor to run a program substantially as 
hereinbefore described with reference to the accompanying drawings. 
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